$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ebb843c9-7189-3e02-9911-bb156d795e8a.roa File: ebb843c9-7189-3e02-9911-bb156d795e8a.roa (raw, json) Hash identifier: 7RhPrn9LtcfuybakSLzKsz7uUEee6MH0zyULqnwnlr0= Subject key identifier: 85:9C:C3:D2:BD:D1:97:74:CB:5C:F9:6B:78:5C:42:30:07:0C:58:9F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584DF4DB9F4080398B3C5E7ABD00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ebb843c9-7189-3e02-9911-bb156d795e8a.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 81 IP address blocks: 128.109.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:9f:40:80:39:8b:3c:5e:7a:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=575a3fa0-3ecd-444d-b8fb-df9178b4c07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:06:84:26:b4:75:76:51:46:9d:57:23:01: fd:3a:71:d8:24:7b:4f:95:2e:60:3e:65:68:f2:9b: fb:ca:ea:49:c0:d5:af:4e:0a:42:bb:43:eb:f0:d1: 9f:84:20:ae:70:08:28:07:72:f7:c7:90:95:79:41: 39:e6:c0:a0:54:1a:ba:cb:b5:e2:4b:08:e8:0e:ff: 93:e8:36:c6:86:97:a3:a6:76:70:bd:b5:06:6b:a7: 2d:25:b6:63:ca:34:fb:c4:6d:c2:01:51:ca:fc:4a: 84:9e:bc:b8:87:1c:6d:53:ed:92:b7:b4:84:50:73: dc:67:94:1f:ab:44:0c:40:a3:50:08:8f:3f:5b:91: 8d:a7:cf:a2:37:db:c6:2e:73:cf:5f:81:62:eb:8b: 16:ce:b0:db:c8:6b:46:dd:f8:51:b8:2a:f8:6d:4d: 9b:32:e1:0f:67:29:ed:c1:a1:cb:4a:97:df:19:72: 4f:75:ab:61:58:87:f9:7e:96:06:38:eb:ec:af:1e: 84:fb:ad:e2:99:cb:cd:e5:bb:b4:52:6a:94:66:63: 61:29:e8:2d:40:99:5d:31:ba:16:6f:37:05:7c:e1: 40:69:f4:fb:e8:ea:77:31:14:3a:70:c2:dd:58:87: 38:99:1d:0b:62:40:d8:b1:0b:e9:1f:60:d9:ea:dc: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9C:C3:D2:BD:D1:97:74:CB:5C:F9:6B:78:5C:42:30:07:0C:58:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ebb843c9-7189-3e02-9911-bb156d795e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:55:f0:ee:bc:6e:9c:54:b5:31:01:c4:e5:68:60:c8:23:2e: 08:f3:7d:2f:05:57:6f:1a:64:3a:36:0b:76:fd:2e:13:aa:40: fb:d4:46:e8:7c:01:57:86:14:6a:ed:22:fc:98:7e:d1:46:6b: 04:1c:14:30:c3:46:8a:47:d2:0f:de:c0:5d:83:be:79:7c:ce: bf:33:4c:ab:44:7e:1b:16:b3:38:ab:e9:2c:ea:7e:aa:7c:14: 93:97:86:a8:54:4f:1f:db:b1:4b:d9:de:1b:4d:df:8a:45:05: e7:07:f2:fa:dd:6f:e5:58:d9:57:90:da:6c:61:49:02:09:9b: 75:04:47:7b:30:b7:4f:0e:86:82:3b:87:77:f7:b6:a4:f8:b2: 2f:2f:f1:52:26:02:2b:a0:58:23:c8:2a:8d:a4:99:c9:63:cd: 6e:da:7c:cb:22:1c:10:4f:41:69:de:aa:f2:38:db:5a:ec:9e: 4f:00:52:73:c8:b3:12:5f:95:c3:79:cd:16:ca:68:5b:dd:d9: 8b:49:64:a1:8e:6c:ea:bf:c0:89:4e:b4:0b:f8:1a:e0:5e:2f: d9:de:ed:53:3e:89:0f:9f:e2:a0:69:19:2c:71:c1:99:f6:e5: 97:bc:49:30:10:ef:3b:f9:01:f9:38:58:9b:50:d7:36:f3:f9: 72:aa:40:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30259AgDmLPF56vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NTc1YTNmYTAtM2VjZC00NDRkLWI4ZmItZGY5MTc4YjRjMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZwGhCa0dXZRRp1XIwH9OnHYJHtPlS5gPmVo 8pv7yupJwNWvTgpCu0Pr8NGfhCCucAgoB3L3x5CVeUE55sCgVBq6y7XiSwjoDv+T 6DbGhpejpnZwvbUGa6ctJbZjyjT7xG3CAVHK/EqEnry4hxxtU+2St7SEUHPcZ5Qf q0QMQKNQCI8/W5GNp8+iN9vGLnPPX4Fi64sWzrDbyGtG3fhRuCr4bU2bMuEPZynt waHLSpffGXJPdathWIf5fpYGOOvsrx6E+63imcvN5bu0UmqUZmNhKegtQJldMboW bzcFfOFAafT76Op3MRQ6cMLdWIc4mR0LYkDYsQvpH2DZ6twa5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWcw9K90Zd0y1z5a3hcQjAHDFifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZWJiODQzYzktNzE4OS0z ZTAyLTk5MTEtYmIxNTZkNzk1ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxV8O68bpxUtTEBxOVoYMgjLgjzfS8FV28aZDo2C3b9LhOqQPvURuh8 AVeGFGrtIvyYftFGawQcFDDDRopH0g/ewF2Dvnl8zr8zTKtEfhsWszir6Szqfqp8 FJOXhqhUTx/bsUvZ3htN34pFBecH8vrdb+VY2VeQ2mxhSQIJm3UER3swt08OhoI7 h3f3tqT4si8v8VImAiugWCPIKo2kmcljzW7afMsiHBBPQWneqvI421rsnk8AUnPI sxJflcN5zRbKaFvd2YtJZKGObOq/wIlOtAv4GuBeL9ne7VM+iQ+f4qBpGSxxwZn2 5Ze8STAQ7zv5Afk4WJtQ1zbz+XKqQIY= -----END CERTIFICATE-----Generated at Sat Jun 13 16:06:34 2026 by rpki-client